e-Client · data protection
How we use your data in e-Client
This notice explains what personal data Serious Business 2003 SRL processes in e-Client, our customer portal, why, and for how long. It completes the privacy policy of the serious.ro website and our confidentiality commitment for documents.
1. Who is responsible
Serious Business 2003 SRL, VAT RO15425387, Trade Reg. J2003000610039, registered office Str. Doamna Stanca nr. 15B, Pitești, Argeș County, Romania. Data protection officer (DPO): dpo@serious.ro.
2. What data, and why
| Data | Why | Legal basis (GDPR art. 6) |
|---|---|---|
| Your account: e-mail, name, job title, phones, company | access to your company's projects, offers and invoices | performing the contract with your company (b); our legitimate interest in serving you as its contact (f) |
| Sign-in and security: your password (kept only as a one-way hash), sign-in attempts, IP address, remembered devices, activity log | protecting accounts, preventing and investigating abuse | legitimate interest (f) |
| Requests and files you send, your messages | preparing offers and carrying out projects | performing the contract (b) |
| Online offer confirmation: the code sent to your e-mail, your drawn signature, time, IP address and browser, a copy of the offer | proof of the agreement | performing the contract (b); legitimate interest in being able to prove it (f) |
| Offers and invoices | accounting | legal obligation (c) |
| The satisfaction survey (optional) | improving our services | legitimate interest (f) |
Documents you send may contain personal data of other people. We use them only for your order, as a processor for your company, as our terms and conditions set out (article 8).
3. Who else sees it
Our team and the collaborators working on the project - translators, desktop publishers, engineers, doctors and other specialists (all bound by confidentiality), our hosting and e-mail providers, the Romanian tax authority (ANAF) or the EU VIES system when we check a VAT number (the VAT number only), and authorities when the law requires it. We do not sell data and do not use it for advertising. If a project needs a collaborator outside the European Economic Area, the transfer is made with the safeguards the GDPR requires.
4. How long we keep it
- Your account: as long as you use it; a closed account, or one not used for 3 years, is reviewed by a person and removed.
- Sign-in attempts: 12 months. Activity log: 24 months.
- One-time links and codes: a few days after they expire. Unconfirmed registrations: 30 days.
- Offers, confirmations and invoices: 10 years (accounting duties and limitation periods).
- Project files: as our terms and conditions set out.
5. Your rights
You have the right of access, rectification, erasure, restriction, objection and data portability. In e-Client, on the Account page: correct your details, download all your data as one file, and close your account. For anything else, write to dpo@serious.ro. You can also complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).
6. Cookies
e-Client uses only strictly necessary cookies, which is why it does not ask for consent:
| Cookie | What for | How long |
|---|---|---|
| ECLSESS | your session while you are signed in | until you close the browser |
| ecl_r | "Keep me signed in", only if you tick it | 30 days |
| ecl_lang | the language you chose | 1 year |
No analytics or advertising cookies, and no third-party tracking. The pages' animation runs in your browser and loads nothing from other sites.
Version of 12 October 2026.